$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432a618a-b8cb-3d36-8340-a7429115b0d8.roa File: 432a618a-b8cb-3d36-8340-a7429115b0d8.roa (raw, json) Hash identifier: 4eHriQVhzoMXVejwsXsxWKHwpCMDPaCRX6eluTMgRgY= Subject key identifier: F4:AF:7A:81:F8:95:0D:EE:5A:E9:CA:FB:F8:20:6F:AA:57:76:45:E1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24B189EDBFFF5D4F0FEE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432a618a-b8cb-3d36-8340-a7429115b0d8.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.199.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b1:89:ed:bf:ff:5d:4f:0f:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=ce35442a-a1ed-4340-9f23-5a92d2ee2353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:59:bf:6c:d6:01:6b:a2:f2:35:12:5d:2e:68: 74:ac:a2:83:14:d8:d1:e7:1d:1b:ad:c5:7a:d6:5d: 33:d2:bf:5c:86:54:68:53:95:a1:01:c7:81:67:9f: 0e:b5:ba:5c:e5:ed:0e:31:4d:3c:19:da:b7:3b:b5: bd:68:7d:f2:0c:d3:86:86:b7:ca:33:5f:43:ad:3e: bb:28:ea:16:d5:67:33:1d:37:ac:fd:fe:43:19:5b: b0:26:64:75:ff:c9:bd:44:13:e9:58:f8:7a:29:63: 26:6c:e5:7b:d5:49:bb:d7:7d:dd:dc:34:7f:c5:4b: dd:7e:7c:9a:83:1b:93:af:a9:83:a8:a4:0f:34:57: a2:cb:54:ba:29:55:3b:ca:3a:ac:c2:8d:5a:f3:b7: 76:52:3f:27:69:1d:81:84:1e:30:cc:ac:55:c7:3c: a5:0e:3b:f5:ba:54:75:56:74:c6:b2:67:65:df:7e: 7b:a3:8c:b9:ca:05:92:78:8e:c5:d8:a4:f1:f8:b0: 88:24:11:f3:93:26:fc:72:6e:62:26:d9:45:e3:c3: 07:ff:47:98:ba:39:24:c2:f5:17:81:ec:44:90:88: 8c:ee:10:c9:3a:cb:61:63:af:28:e4:40:77:56:94: a6:c4:52:ea:15:13:bf:2b:5f:14:72:39:de:5f:72: 31:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AF:7A:81:F8:95:0D:EE:5A:E9:CA:FB:F8:20:6F:AA:57:76:45:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432a618a-b8cb-3d36-8340-a7429115b0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8c:f3:9e:1b:2f:91:a4:19:d6:2f:56:74:5a:25:6d:08:79: 35:ea:68:b0:76:52:ae:c0:fe:d3:19:4d:a3:19:67:b5:bf:19: a2:ed:c2:85:9c:93:2e:cf:b8:09:b0:86:2d:7a:e7:82:01:d7: 79:4e:26:5e:89:91:fa:7e:74:f0:21:a1:21:57:bb:b4:8a:0d: 02:e4:53:b6:ac:ca:ec:2f:49:d2:5f:35:58:b8:e2:d0:cb:47: 05:76:13:cf:1d:1f:07:2d:8c:5d:c0:c9:da:4a:d4:74:d9:45: 21:ce:f8:89:db:84:0a:14:e4:df:c3:38:a8:88:a3:0a:e8:91: c7:11:e6:28:f8:a5:66:7f:a2:de:fe:39:95:ff:ff:6b:70:b9: 8f:bc:1e:01:a5:8f:41:74:fc:72:60:aa:b7:04:1a:6b:73:d2: c1:57:71:9a:ef:4b:52:91:31:83:27:c0:ce:de:bb:76:d4:1f: 87:52:0d:be:2f:1c:a6:04:08:e2:fe:6a:0b:c1:13:3f:07:5f: 33:2d:cd:d2:39:05:ae:72:c1:10:5e:34:2e:bb:c6:c7:13:43: 52:8d:f2:6c:83:0b:07:1e:57:7a:71:24:c5:9f:1f:fc:b1:6a: 14:32:90:c9:76:3f:2a:be:e4:5c:72:a7:4a:87:01:a0:94:be: e0:46:ae:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLGJ7b//XU8P7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk Y2UzNTQ0MmEtYTFlZC00MzQwLTlmMjMtNWE5MmQyZWUyMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1m/bNYBa6LyNRJdLmh0rKKDFNjR5x0brcV6 1l0z0r9chlRoU5WhAceBZ58Otbpc5e0OMU08Gdq3O7W9aH3yDNOGhrfKM19DrT67 KOoW1WczHTes/f5DGVuwJmR1/8m9RBPpWPh6KWMmbOV71Um7133d3DR/xUvdfnya gxuTr6mDqKQPNFeiy1S6KVU7yjqswo1a87d2Uj8naR2BhB4wzKxVxzylDjv1ulR1 VnTGsmdl3357o4y5ygWSeI7F2KTx+LCIJBHzkyb8cm5iJtlF48MH/0eYujkkwvUX gexEkIiM7hDJOsthY68o5EB3VpSmxFLqFRO/K18UcjneX3IxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSveoH4lQ3uWunK+/ggb6pXdkXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDMyYTYxOGEtYjhjYi0z ZDM2LTgzNDAtYTc0MjkxMTViMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiM854bL5GkGdYvVnRaJW0IeTXqaLB2Uq7A/tMZTaMZZ7W/GaLtwoWc ky7PuAmwhi1654IB13lOJl6Jkfp+dPAhoSFXu7SKDQLkU7asyuwvSdJfNVi44tDL RwV2E88dHwctjF3AydpK1HTZRSHO+InbhAoU5N/DOKiIowrokccR5ij4pWZ/ot7+ OZX//2twuY+8HgGlj0F0/HJgqrcEGmtz0sFXcZrvS1KRMYMnwM7eu3bUH4dSDb4v HKYECOL+agvBEz8HXzMtzdI5Ba5ywRBeNC67xscTQ1KN8myDCwceV3pxJMWfH/yx ahQykMl2Pyq+5Fxyp0qHAaCUvuBGrg4= -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:19 2025 by rpki-client